skills.rest
PlamenTSV
PlamenTSVCOMMUNITY
Explore all skills by this author →
𝕏@p_tsanevGitHub

ability-analysis

Analyze Sui Move struct abilities to detect unauthorized transfer and ownership risks.

276|56|Updated Mar 16, 2026
Search Tags:#ownership#security-audit#ability-analysis#sui-move#transfer-semantics#hot-potato
One-click install
npx skills add https://github.com/PlamenTSV/plamen --skill ability-analysis
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: ability-analysis
Source: https://github.com/PlamenTSV/plamen/tree/main/agents/skills/sui/ability-analysis
Command: npx skills add https://github.com/PlamenTSV/plamen --skill ability-analysis

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Automates the analysis of Sui Move struct abilities to detect misconfigurations that could enable unauthorized transfers, problematic ownership patterns, or insecure propagation of capabilities.

Core Features & Use Cases

  • Enumerates all structs with a key ability across modules and validates the id: UID rule.
  • Classifies object ownership (Owned, Shared, Frozen, Wrapped) and evaluates transfer restrictions and potential bypass risks.
  • Detects hot potato patterns and dynamic field propagation that can cause persistence or leakage in state.

Quick Start

Scan your Sui Move codebase to generate an ability-analysis report detailing struct abilities, ownership, and transfer risks.

Frequently Asked Questions about ability-analysis

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit Sui Move struct abilities for unauthorized transfer risks?▼

You audit Sui Move struct abilities by enumerating structs with a key ability, validating the id: UID field order, and classifying object ownership to detect unauthorized transfer risks across modules.

What is the id: UID rule in Sui Move security audits?▼

The id: UID rule in Sui Move security audits requires that the id: UID field must be the first field in any struct with a key ability, ensuring correct object ownership and transfer semantics.

How do I detect hot potato patterns in Sui Move contracts?▼

Detecting hot potato patterns in Sui Move contracts requires analyzing dynamic field propagation to identify state persistence or capability leakage risks within the module's transfer semantics.

Does this approach differentiate store versus key transfers in Sui Move?▼

Yes, Sui Move ability analysis differentiates store versus key transfers by classifying object ownership as Owned, Shared, Frozen, or Wrapped and evaluating potential bypass risks in transfer restrictions.

Can I scan an entire Sui Move codebase for insecure ownership patterns?▼

Yes, you can scan an entire Sui Move codebase to generate an ability analysis report detailing struct abilities, object ownership classifications, and insecure ownership or transfer risks.

Related Skills

Explore More Software Engineering Skills→
widnyanawidnyana
4

sui-move-object

Enforce Suit Move object-struct definitions, ownership behavior, and dynamic field usage.

Community
Intermediate
0x-Shashi0x-Shashi
56

Sui Smart Contract Security Scanner

Map Sui Move object ownership and lifecycle to surface security vulnerabilities.

Community
Advanced
MystenLabsMystenLabs
10

sui-object-model

Guide Sui Move object modeling with ownership, storage, and transfer patterns.

Official
Advanced
KentoShimizuKentoShimizu
7

api-contract-testing

Generate executable API contract tests and enforce CI release gates.

Community
Advanced